Keys & Certificates

Public-key cryptography uses a pair of keys, a public key that can be shared and a private key that must stay secret, and a TLS certificate binds a public key to a domain name. Browsers trust a certificate only through a chain that leads to a trusted root certificate, and only until it expires.